This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/dw6jrOHCvr8vEJ8EI53CbIWla-4.roa File: dw6jrOHCvr8vEJ8EI53CbIWla-4.roa (raw, json) Hash identifier: RtlekyDtmYYhtqPCal9yHYHp8kLr84QNk3nCsBWdbO0= Subject key identifier: 77:0E:A3:AC:E1:C2:BE:BF:2F:10:9F:04:23:9D:C2:6C:85:A5:6B:EE Certificate issuer: /CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4 Certificate serial: 019B7BA4FB3B97FF0092200EFBC0A951D9C9 Authority key identifier: 42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/dw6jrOHCvr8vEJ8EI53CbIWla-4.roa Signing time: Thu 01 Jan 2026 22:19:28 +0000 ROA not before: Thu 01 Jan 2026 22:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48293 IP address blocks: 91.194.246.0/23 maxlen: 23 91.194.246.0/24 maxlen: 24 91.194.247.0/24 maxlen: 24 91.212.217.0/24 maxlen: 24 94.228.192.0/20 maxlen: 20 94.228.192.0/24 maxlen: 24 94.228.193.0/24 maxlen: 24 94.228.194.0/24 maxlen: 24 94.228.195.0/24 maxlen: 24 94.228.196.0/24 maxlen: 24 94.228.197.0/24 maxlen: 24 94.228.198.0/24 maxlen: 24 94.228.199.0/24 maxlen: 24 94.228.200.0/24 maxlen: 24 94.228.201.0/24 maxlen: 24 94.228.202.0/24 maxlen: 24 94.228.203.0/24 maxlen: 24 94.228.204.0/24 maxlen: 24 94.228.205.0/24 maxlen: 24 94.228.206.0/24 maxlen: 24 94.228.207.0/24 maxlen: 24 185.108.20.0/22 maxlen: 22 185.108.20.0/24 maxlen: 24 185.108.20.0/25 maxlen: 25 185.108.21.0/24 maxlen: 24 185.108.22.0/24 maxlen: 24 185.108.23.0/24 maxlen: 24 2a06:4180::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:fb:3b:97:ff:00:92:20:0e:fb:c0:a9:51:d9:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4 Validity Not Before: Jan 1 22:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=770ea3ace1c2bebf2f109f04239dc26c85a56bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a1:f9:bd:0c:59:b7:b2:6d:53:28:83:e1:c1: ed:e3:e2:c1:f9:1f:7d:df:c6:91:c7:a3:1f:a8:39: 7c:08:1e:01:7f:49:81:42:ec:71:33:65:c1:61:e3: bb:9e:22:96:3f:26:ce:cd:da:24:40:80:cd:25:3d: 7a:0a:89:c1:13:3d:a9:8e:c5:2c:e7:23:93:2d:40: 3f:32:f2:98:b3:07:3c:84:15:ab:72:be:ac:33:9d: 53:d6:78:e1:0c:fb:10:5b:7e:db:72:35:52:0d:a8: a7:75:7c:55:3e:75:4d:18:30:59:c4:07:98:89:01: 3b:33:56:98:95:f9:bf:3c:f6:6c:33:d4:56:c5:47: e5:42:71:89:d0:43:90:cc:24:3c:2b:66:b2:82:8f: 69:c4:38:0c:4d:b6:ad:23:90:d1:7e:a6:95:97:43: 35:ee:d8:08:33:9e:62:59:ac:72:2f:06:f8:51:d5: a6:de:aa:59:7f:f5:5d:17:30:2d:89:d0:ed:ce:10: 26:ba:7c:49:f1:15:8a:f7:3b:3c:3f:b4:28:1d:2f: 60:63:1a:70:78:87:e9:95:73:5f:54:79:5a:91:17: c0:e5:09:a3:b8:47:8e:83:06:b3:6b:a2:c5:f0:29: 07:81:7b:19:46:ef:aa:34:67:83:86:de:e1:2a:8d: 7a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0E:A3:AC:E1:C2:BE:BF:2F:10:9F:04:23:9D:C2:6C:85:A5:6B:EE X509v3 Authority Key Identifier: keyid:42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/dw6jrOHCvr8vEJ8EI53CbIWla-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.246.0/23 91.212.217.0/24 94.228.192.0/20 185.108.20.0/22 IPv6: 2a06:4180::/29 Signature Algorithm: sha256WithRSAEncryption 41:9a:8b:60:eb:ef:e3:e1:8f:ce:24:14:28:bb:50:c4:b8:26: 05:3d:c3:e6:f3:70:c2:8b:12:fd:b5:fb:7f:ad:fb:3a:89:64: 6b:97:2c:96:ab:a2:15:74:e7:57:c3:ea:04:de:2f:29:bf:94: 80:e1:c0:a4:d9:04:a0:26:96:99:f8:f5:3e:63:76:a6:ef:e7: 66:be:f4:d3:d4:b9:1d:ff:80:b2:7b:34:32:46:d7:4c:e8:b8: db:d3:f0:50:ed:5f:3f:e9:b7:0c:df:fe:e5:e3:17:fe:8a:b6: 2d:22:c6:1b:fa:21:ba:fb:20:4a:16:c9:3e:6e:3d:79:57:11: b6:16:cb:c0:74:14:70:12:53:24:3a:99:ac:b8:8c:f7:12:84: 26:ac:46:35:79:a1:3e:da:2b:2b:f5:ef:ad:7e:d9:12:9f:4c: c0:8a:cb:71:c6:4b:13:59:e6:ee:1e:5c:54:f8:a6:5f:d6:3d: 66:d3:77:f9:22:4e:0a:58:8a:c1:1c:1a:2f:b4:fe:df:7f:b9: 9a:24:75:a4:62:32:09:8a:df:a4:e1:15:5c:c8:3b:f0:3a:80: 8d:4c:2a:81:46:46:43:5d:e1:ca:7f:8a:e7:8c:98:70:c0:86: 7e:2e:fe:0a:14:06:6f:40:79:e1:61:ba:1c:72:f7:ff:e9:49: 4f:c3:40:8b -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt7pPs7l/8AkiAO+8CpUdnJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYjRjNzlhMjJhM2ZlOTg3ZWYzMTkwOGNkNDRmZjgxZTli MWFjZjQwHhcNMjYwMTAxMjIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzBlYTNhY2UxYzJiZWJmMmYxMDlmMDQyMzlkYzI2Yzg1YTU2YmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqH5vQxZt7JtUyiD4cHt4+LB+R99 38aRx6MfqDl8CB4Bf0mBQuxxM2XBYeO7niKWPybOzdokQIDNJT16ConBEz2pjsUs 5yOTLUA/MvKYswc8hBWrcr6sM51T1njhDPsQW37bcjVSDaindXxVPnVNGDBZxAeY iQE7M1aYlfm/PPZsM9RWxUflQnGJ0EOQzCQ8K2aygo9pxDgMTbatI5DRfqaVl0M1 7tgIM55iWaxyLwb4UdWm3qpZf/VdFzAtidDtzhAmunxJ8RWK9zs8P7QoHS9gYxpw eIfplXNfVHlakRfA5QmjuEeOgwaza6LF8CkHgXsZRu+qNGeDht7hKo16VwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFHcOo6zhwr6/LxCfBCOdwmyFpWvuMB8GA1UdIwQY MBaAFEK0x5oio/6YfvMZCM1E/4Hpsaz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXJUSG1pS2pfcGgtOHhrSXpVVF9nZW14clBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC80YjkxMWMtM2Q0ZC00MmQ1LTkyMzQt ZjI4ODEzN2NiNTAwLzEvZHc2anJPSEN2cjh2RUo4RUk1M0NiSVdsYS00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC80YjkxMWMtM2Q0ZC00MmQ1LTkyMzQtZjI4ODEzN2NiNTAw LzEvUXJUSG1pS2pfcGgtOHhrSXpVVF9nZW14clBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBW8L2AwQA W9TZAwQEXuTAAwQCuWwUMA0EAgACMAcDBQMqBkGAMA0GCSqGSIb3DQEBCwUAA4IB AQBBmotg6+/j4Y/OJBQou1DEuCYFPcPm83DCixL9tft/rfs6iWRrlyyWq6IVdOdX w+oE3i8pv5SA4cCk2QSgJpaZ+PU+Y3am7+dmvvTT1Lkd/4CyezQyRtdM6Ljb0/BQ 7V8/6bcM3/7l4xf+irYtIsYb+iG6+yBKFsk+bj15VxG2FsvAdBRwElMkOpmsuIz3 EoQmrEY1eaE+2isr9e+tftkSn0zAistxxksTWebuHlxU+KZf1j1m03f5Ik4KWIrB HBovtP7ff7maJHWkYjIJit+k4RVcyDvwOoCNTCqBRkZDXeHKf4rnjJhwwIZ+Lv4K FAZvQHnhYboccvf/6UlPw0CL -----END CERTIFICATE-----Generated at Mon Jan 26 20:26:53 2026 by rpki-client